Principal Cloud Solutions Architect (AWS) · Founder, Kumokage GmbH

Raffaele Sollecito

I design secure, resilient AWS platforms for enterprise and regulated clients.

AWS Certified Solutions Architect – Professional and Security – Specialty, and AWS Certification Subject Matter Expert. Landing zones, cloud security, Kubernetes platforms, multi-region disaster recovery and agentic AI on Amazon Bedrock — owned end-to-end as the accountable principal architect, through my Zürich company, Kumokage GmbH.

See selected workDownload résuméGet in touch
Zürich, Switzerland · Clients in Switzerland and across EuropeTaking on new engagements through Kumokage GmbH

Verified AWS credentials

All badges verifiable on Credly ↗
What I do

Architecture you can put in production

Landing zones & governance

Multi-account AWS foundations with Control Tower, Organizations and SCPs, IAM Identity Center federation with Entra ID or Google Workspace, and guardrails reconciled in Terraform or CDK.

Security & compliance

Zero-trust network perimeters (Transit Gateway, Network Firewall, WAFv2, Shield Advanced), Security Hub remediation, KMS and Secrets Manager, S3 Object Lock WORM archives, incident response.

Platforms & resilience

Production EKS and ECS platforms with GitOps and Karpenter, Aurora and Valkey data tiers, and multi-region disaster recovery designed as code and proven in live failover drills.

AI-native engineering

Agentic internal developer platforms on Amazon Bedrock AgentCore — RAG with cited sources, agents that gate merge requests, credential-less OIDC delivery across many accounts.

Selected work

Recent engagements

Mar 2026 — Present

AWS platform engineering & edge migration for live game titles

Global mobile & web gaming publisher — via a consulting partner

Own the Terraform platform behind three live titles across multiple accounts, six EKS clusters and eleven Aurora clusters. Migrated seven production zones from Cloudflare to CloudFront, WAFv2 and Shield Advanced on budget. Designed multi-region DR for EKS, Aurora, Valkey and CI/CD as one parameter-driven workflow and validated it in a live failover drill. RabbitMQ 3.13→4.2 on Amazon MQ, AWS Backup PITR, EKS 1.35 with Karpenter, Security Hub FSBP. Ran a CloudFront/WAF workshop for 12 engineers.

Jul 2025 — Present

AI-native internal developer platform

Global IoT positioning & wireless semiconductor company

Led the architecture and hands-on delivery of an agentic developer platform on Amazon Bedrock AgentCore, Lambda, EventBridge and DynamoDB: repo-discovery, architecture-compliance and RAG agents that gate GitLab merge requests and answer with cited sources. Cross-account GitLab OIDC deploy roles (CDK) across eleven AWS accounts; all AWS Security Agent findings remediated. HA self-managed GitLab, GitHub and SVN migration with full history, serverless company wiki.

Aug 2023 — Present

Cloud platform, compliance archive & security operations

FCA-regulated fintech group

Control Tower landing zone with Security Hub, Google Workspace SSO into IAM Identity Center, GitLab OIDC CI/CD, ECS microservices streaming real-time market data, AppSync GraphQL and Managed Grafana. Immutable 7-year email archive on S3 Object Lock that also cut licensing ≈51%. Led the response to a P1 brand-impersonation attack, hardened SPF/DKIM/DMARC on ten domains, migrated Microsoft 365 to Google Workspace, designed US multi-region HA.

All engagements
10+
Years in software engineering
7+
Years on AWS
4
AWS certifications
SME
AWS Certification exam contributor

CareerPreviously with PwC Luxembourg, Volkswagen Digital Solutions, ITnet and Tantosvago; independent since 2025, and since 2026 through my Zürich company, Kumokage GmbH. Experience →

Beyond the cloud

Author, and a story I have never hidden

Honor Bound book cover

Two memoirs

Honor Bound (Simon & Schuster, 2012) and Un passo fuori dalla notte (Longanesi, 2015).

Read more →

The case, 2007–2015

Wrongfully accused in the Meredith Kercher case and definitively acquitted by Italy's Supreme Court in 2015. The facts, a timeline and the court documents are here.

Read more →

Need a principal architect?

I take on a small number of engagements at a time — architecture ownership, security programs, platform migrations, AI-native developer tooling.

Start a conversationDownload résumé